capsule icon indicating copy to clipboard operation
capsule copied to clipboard

feat: Permission API block

Open niuxe opened this issue 5 months ago • 7 comments

Working from the conversation in this PR: https://github.com/projectcapsule/capsule/pull/1332

Original feature was to implement a flag for the webhook to allow creation of namespace, by letting some users impersinate the owner.

After feedback from @oliverbaehler this has changed to be a new API block in the Tenant resource, for controlling the RBAC for the Capsule Tenant.

Features:

  • Keeping the old functionality of the AdditionalRoleBindings field.
  • Providing an option for Capsule to create ClusterRoleBindings (Addressing this issue #1386 )
  • Providing a way of specifying the namespaces for the RoleBindings with the use of a namespace selector.

niuxe avatar May 11 '25 17:05 niuxe